CVEvulnerability

CVE-2006-5601

9.0 HIGH Published 2006-10-28 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-10-28
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
Weaknesses
CWE-119

Description

Stack-based buffer overflow in the eap_do_notify function in eap.c in xsupplicant before 1.2.6, and possibly other versions, allows remote authenticated users to execute arbitrary code via unspecified vectors.

Affected configurations

• xsupplicant xsupplicant (<= 1.2.5) • xsupplicant xsupplicant 0.5 • xsupplicant xsupplicant 0.6 • xsupplicant xsupplicant 0.7 • xsupplicant xsupplicant 0.8 • xsupplicant xsupplicant 0.8b • xsupplicant xsupplicant 1.0 • xsupplicant xsupplicant 1.0.1 • xsupplicant xsupplicant 1.0pre1 • xsupplicant xsupplicant 1.0pre2 • xsupplicant xsupplicant 1.2 • xsupplicant xsupplicant 1.2.1 • xsupplicant xsupplicant 1.2.2 • xsupplicant xsupplicant 1.2.3 • xsupplicant xsupplicant 1.2.4 • xsupplicant xsupplicant 1.2pre1

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References